Send an e-mail to security@signalwire.com to report a vulnerability. If accepted, we'll create a security advisory and add you and your team as collaborators. Please allow our team sufficient time to resolve the vulnerability before disclosing it; we'll remain in contact about the fix and may ask for your assistance to verify it is resolved.
Repository navigation
Security: signalwire/freeswitch
Security
SECURITY.md
-
Off-by-one heap write in core XML serialization of four-byte UTF-8 sequencesGHSA-r6vh-qmwm-h3cc published
Oct 26, 2026 by andywolkModerate -
Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authenticationGHSA-294g-hq4w-c275 published
Oct 26, 2026 by andywolkHigh -
mod_sofia: stack buffer overflow from an over-long SIP To-header userGHSA-6368-jw63-r8g2 published
Oct 26, 2026 by andywolkModerate -
mod_sofia: stack buffer overflow from an over-long SIP Contact display-nameGHSA-xrp9-7wv5-xr8c published
Oct 26, 2026 by andywolkModerate -
Pre-authentication out-of-bounds write in MSRP message body parsingGHSA-m8xv-crhj-3rf7 published
Oct 26, 2026 by andywolkHigh -
Stack buffer overflow in mod_rtmp AVC sequence-header constructionGHSA-qmh2-f6cv-79mf published
Oct 26, 2026 by andywolkModerate -
Out-of-bounds read in mod_rtmp H.264 video message parsingGHSA-2gp7-f34j-j4xw published
Oct 26, 2026 by andywolkHigh -
Pre-authentication stack buffer overflow in mod_rtmp control-message handlingGHSA-hj6x-9653-p796 published
Oct 26, 2026 by andywolkHigh -
Stack buffer overflow parsing the SDP a=crypto key material on inbound callsGHSA-fvjx-g9x8-3xqh published
Oct 26, 2026 by andywolkHigh -
Pre-authentication `userVariables` injection in `mod_verto`.GHSA-j38x-xm7f-9p2f published
Jun 3, 2026 by andywolkModerate
Learn more about advisories related to signalwire/freeswitch in the GitHub Advisory Database